Make image processing automation-safe

.devcontainer/devcontainer.json

@@ -0,0 +1,9 @@
+{
+	"name": "optimizt",
+	"workspaceFolder": "/workspace",
+	"dockerComposeFile": "./docker-compose.yml",
+	"service": "app",
+	"remoteUser": "root",
+	"onCreateCommand": ".devcontainer/on-create.sh",
+	"postCreateCommand": ".devcontainer/post-create.sh"
+}

.devcontainer/docker-compose.yml

@@ -0,0 +1,13 @@
+name: optimizt
+
+services:
+  app:
+    image: node:24.18.0-trixie-slim
+    command: sleep infinity
+    environment:
+      - SSH_AUTH_SOCK=/ssh-auth.sock
+    volumes:
+      - ../:/workspace:cached
+      - ~/.gitconfig:/root/.gitconfig:ro
+      - ~/.config/git/ignore:/root/.config/git/ignore:ro
+      - /run/host-services/ssh-auth.sock:/ssh-auth.sock

.devcontainer/on-create.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+export DEBIAN_FRONTEND=noninteractive
+
+apt update
+apt install --yes --no-install-recommends \
+	ca-certificates \
+	openssh-client \
+	git
+
+rm -rf /var/lib/apt/lists/*

.devcontainer/post-create.sh

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+npm ci --no-audit

.github/workflows/ci-nodejs.yml

@@ -20,6 +20,9 @@ jobs:
             macos-15-intel, # x64
             macos-15, # arm64
           ]
+        include:
+          - os: windows-latest
+            node-version: 22.22.1
     steps:
       - name: Checkout repository
         uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5

.gitignore

@@ -1,3 +1,2 @@
-.devcontainer/
 coverage/
 node_modules/

.npmrc

@@ -0,0 +1,4 @@
+allow-git=none
+fund=false
+git-tag-version=false
+min-release-age=3